CVE-2024-5095
Victor Zsviot Camera MQTT Packet denial of service
- State
- Published
- Severity
- 7.1 High
- Published
- May 19, 2024
- Updated
- Aug 1, 2024
- Reserved
- May 18, 2024
Description
A vulnerability classified as problematic has been found in Victor Zsviot Camera 8.26.31. This affects an unknown part of the component MQTT Packet Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265077 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 3.0 | 6.5 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | VulDB |
| 2.0 | 6.3 Medium | AV:N/AC:M/Au:S/C:N/I:N/A:C | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
Zsviot CameraVictor |
|
References
- VDB-265077 | Victor Zsviot Camera MQTT Packet denial of servicevdb-entry
- VDB-265077 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #332461 | zsviot Camera firmware: V8.26.31 Denial of Servicethird-party-advisory
- https://github.com/kzLiu2017/Tuya_Cam_CVE_Doc/blob/main/zsviot%20camera.pdfexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.